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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

Listing of Claims : 

1. (Canceled) 

2. (Canceled) 

3. (Currently Amended) A cryptographic communications method for 
communications of information between entities wherein a plurality of centers are 
provided, each of which generates secret keys peculiar to the entities using divided 
pieces of information resulting from division of information specifying each of the 
entities; one entity generates a first common key using a first component contained 
in at least one secret keys generated by at least one of the plurality of centers, the 
secret key being peculiar to the one entity ocnt from the contcro , encrypts plaintext 
to ciphertext using the first common key and sends the ciphertext to another entity, 
the first component corresponding to one or more of the divided pieces of 
information specifying said another entity; and said another entity generates a 
second common key identical to the first common key using a second component 
contained in secret keys peculiar to the another entity sent from said centers, and 
decrypts said ciphertext to the original plaintext using the second common key, the 
second component corresponding to one or more of the divided pieces of information 
specifying the one entity. 
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4. (Currently Amended): A cryptographic communications method for 
communicating information between entities wherein: 

secret keys peculiar to said entities are sent from a center to said entities; 

one entity encrypts plaintext to ciphertext using a first common key derived 
from a first secret key peculiar to the one entity sent from said center and sends the 
ciphertext to another entity; 

said another entity decrypts said ciphertext to the original plaintext using a 
second common key identical to the first common key, the second common key being 
derived from a second secret key peculiar to said another entity sent from said 
center, characterized in that; 

a plurality of said centers are deployed; 

each of said plurality of centers generates secret keys peculiar to said entities 
by adding random numbers peculiar to said entities to divided pieces of information 
resulting from division of information specifying each of said entities; and 

each of said entities generates a common key using a component, contained 
in the secret key peculiar to that selfsame entity, corresponding to one or more of 
the divided pirrp'i of inf™-™^™ nhtainftd from each of said plurality of center s 
which specify opocifying an opposite entity. 

5. (Original): The cryptographic communications method according to 
claim 4, wherein computation formulas for generating secret keys at said centers 
are as follows: 

STT-g'iiHi ^ (mod P) 

S,2 s a i2 H 2 [Ij*] (mod P-l) 
■ 

s ik =<*iRH K [I iK ] (mod P— 1) 
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where 

vector Sij is a secret key corresponding to j'th piece of divided information 

specifying entity i (j = 1, 2, K) 
[vector Iij] is j'th piece of divided information specifying entity i; 
P is a prime number; 

K is number of divisions in the information specifying entity i; 
g is primitive element for GF (P); 

Hj is a symmetrical 2 M x 2 M matrix made up of random numbers; 
M is size of divisions in the information specifying entity i; and 
aij is a personal secret random number for entity i (where an ... cuk = 1 
(mod P-1)). 

6. (Original): The cryptographic communications method according to 
claim 5, wherein computation formulas for generating common keys at said entities 
are as follows: 



k ="o~** rT~*i S i2 E In&l S jk C 1^] 



= H^I,,] Cl ml ] -H K [I iK ] CI^] 

— s imoaP; 



where 

Ki m is common key generated by one entity i for another entity m; and 
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vector Sij [vector Iij] is a component contained in secret key vector Sij of 
entity i, corresponding to divided piece of information specifying 
entity m. 

7. (Original): A common key generator provided at entities in a 
cryptographic communications system for generating common keys to be used in 
processing to encrypt plaintext into ciphertext and in processing to decrypt 
ciphertext into plaintext, comprising: 

storage means at each entity for storing secret keys peculiar to each 
respective entity produced for respective pieces of information resulting from 
division of information specifying each of said respective entities; 

selection means for selecting components corresponding to pieces of 
information specifying opposite entities to be communicated with, from among the 
secret keys stored; and 

means for generating said common keys using said components so selected. 

8. (Currently Amended) A cryptographic communications system for 
reciprocally performing, between a plurality of entities, encrypting processing for 
encrypting plaintext that is information to be sent into ciphertext and decrypting 
processing for decrypting ciphertext so sent back into original plaintext; comprising: 

a plurality of centers that generate secret keys peculiar to said entities using 
pieces of information resulting from division of information specifying each of said 
entities and that sends said secret keys to said entities; and 

a plurality of entities each of which generates a common key employed 
mutually in said encryption and decryption processing when communicating with 
another entity, using a component corresponding to a divided specified information 
to each entity, contained in own secret key sent from the centers, the component 
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further corresponding to one or more pieces of information specifying said another 
entity. 

9. (Original) A computer readable recording medium that stores a 
program that generates at entities involved in communications common keys used 
in processing to encrypt plaintext to ciphertext and in processing to decrypt said 
ciphertext to said plaintext in a cryptographic communications system, comprising: 

first program code means for causing said computer to select a component 
corresponding to one or more of divided pieces of information specifying one entity 
from a secret key peculiar to another entity; and 

second program code means for causing said computer to generate said 
common keys using said components selected. 

10-12. (Canceled) 

13. (Original): A cryptographic communications method for 
communications of information between entities wherein a plurality of centers are 
provided, each of which generates secret keys peculiar to the entities using divided 
specifying information resulting from division of information specifying each of the 
entities into a plurality of blocks; one entity generates a first common key using a 
first component contained in secret keys peculiar to the one entity sent from the 
centers, encrypts plaintext to ciphertext using the first common key and sends the 
ciphertext to another entity, the first component corresponding to one or more of the 
divided pieces of information specifying said another entity; and said another entity 
generates a second common key identical to the first common key using a second 
component contained in secret keys peculiar to the another entity sent from said 
centers, and decrypts said ciphertext to the original plaintext using the second 
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common key, the second component corresponding to one or more of the divided 
pieces of information specifying the one entity; secret keys for first block of divided 
specifying information have a multi-layer structure; and secret keys for remaining 
blocks of divided specifying information have a single-layer structure. 

14. (Currently Amended) A secret key generation method for generating 
secret keys peculiar to entities using divided specifying information resulting from 
division of information specifying said entities into a plurality of blocks, each entity 
generating a common key by using a component corresponding to the divided 
specifying information of another entity, wherein: 

computation formulas for generating said secret keys are as follows: 



Si2 = a i H 2 tI i2 ] + /3 i2 1 
■ 

^ _ T -f* 

S i0 = B a i 1 (mod N) 



T7T= g a i~ T S i i (m o d N) 



g^=g a i T< S n > (mod N) 

i 
i 
i 

g~f = g a f T< s n > (mod N) 

i 

i 

77£= g af T < S M > (mod N) 
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where 

vector Sij is a secret key corresponding to j'th divided specifying 

information for entity i (j = 1, 2, K) 
[vector Iij] is j'th divided specifying information for entity i; 
vector 1 is a vector of dimension K wherein all components are 1; 
Hj is a symmetrical 2 M i x 2 M J matrix made up of random numbers; 
Mj is size of j'th divided specifying information for entity i; 
K is number of block divisions in information specifying entity i; 
ai is a personal secret random number for entity i (where gcd (cu, X(N)) 

- 1 and X ( • ) is Carmichael function); 
N is such that N = PQ (where P and Q are prime); 

By is a personal secret random number for entity i (where 6ii + 612 + ... + 
BiK = X(N)); 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of specifying information for 

entity i (t = 0, 1, 2, T); 
T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) 
below, then the expressions B = c A and B = <A> C represent (hi) and (iv) 
below, respectively. 

(i) A = (a uv ) 

(ii) B - (b^) 

(iii) b^iv = c a uv 
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(iv) bpy = a pv c 

15. (Currently Amended): An encryption method wherein: 

secret keys peculiar to entities are generated using divided specifying 
information resulting from division of information specifying each of said entities 
into a plurality nf hlnrks . each entity generating a common key by using a 
component corresponding to the divided specify ing information of another entity ; 

plaintext is encrypted to ciphertext at one entity using a common key 
generated using a component contained in the secret key peculiar to the one entity, 
the component corresponding to divided specifying information for another entity 
that is a destination of said ciphertext; and 

computation formulas for generating said secret keys peculiar to said entities 

are as follows: 

Si 2 = <*iH 2 [ I i 2^ + & j2 1 
■ 

i 

Slt=a i H K [Tir] +/3 iK T 



g i0 = g a i 1 (mod N) 
Si T= g a i~ T s i i (mod N) 

"£75= g «i" T< s u > (mod a 
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i -^ Sg a f T<S il > 1 



(mod N) 



(mod N) 



where 



vector Sij is a secret key corresponding to j'th divided specifying 

information for entity i (j = 1, 2, K) 
[vector Iy] is j'th divided specifying information for entity i; 
vector 1 is a vector of dimension K wherein all components are 1; 



Mj is size of j'th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

di is a personal secret random number for entity i 

(where gcd (ai, X(N)) = 1 and X ( . ) is Carmichael function); 
N is such that N = PQ (where P and Q are prime); 
By is a personal secret random number for entity i 

(where Bu + 6 i2 + .... + Buc = X (N)) ; 
g is maximum generating element with modulo N; 
vector git is a secret key for 1st block of specifying information for 

entity i (t = 0, 1, 2, T); 
T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) 
below, the expressions B = c A and B = <A> C represent (iii) and (iv) 
below, respectively. 

(i) A = (a^v) 

(ii) B = (M 

(iii) b^v = c a !iv 

(iv) b^v = ajiv c 



Hj is a symmetrical 2 M i x 2^ matrix made up of random numbers; 
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16. (Original): The encryption method according to claim 15, wherein 
computation formulas for generating said common keys are as follows: 

So i m = 8 i0 [ I ml ] 

i 

g S im^S it t I ml ] 
| 8Tim=g it C Iml] 
X 2 i m = S i2 [ I m2 ] 
X i, im = S j j [ I mj ] 

; I 

X K i m = Sjk [ 1^] 
T c v CT-t) 

K im =n g T . c t y - 

t=0 t lm 



i t=()T 1 im im 
T 

s g *\ <« i « i"^ c"C5 + - t -H K cTj] ci^] > +i N ) T 

= g «: T {« ; « ^Ijj cJJ ■*-+-h k [T^] ci^] > } T 

== g hS^-w^ cl^3) T (mod N) 

where 

gtim (= vector git [vector I m i]) is a component corresponding to vector I m i 
for entity m, selected from own vector git for 1st block of 
information specifying entity i (t = 0, 1, 2, T); 



Page 11 of 33 

\\\LA - 81800/0018 - 203522 vl 



Appl. No. 09/489,696 Attorney Docket No. 81800.0018 

Amdt. Dated July 12, 2004 Customer No.: 26021 

Reply to Office Action of February 12, 2004 



xiim = vector su [vector I m i]; 

Xjim (= vector Sij [vector I m j]) is a component corresponding to vector I mj 
for entity m, selected from own vector sy for j'th block of 
information specifying entity i (j = 2, 3, K); 

Kim is a common key generated by one entity i for another entity m; 
and 

yim is sum of (K-l) components Xji m (j = 2, 3, K), that is, yim = X2im + 

X3im + ... + XKim. 

17. (Original): A cryptographic communications method for 
communications of information between entities, wherein 

a plurality of centers are deployed, each of which generates secret keys 
peculiar to said entities using divided specifying information resulting from division 
of information specifying each of said entities into a plurality of blocks, and sends 
the secret keys to the entities respectively; 

one entity generates a first common key using a first component contained in 
secret keys peculiar to the one entity sent from the centers, encrypts plaintext to 
ciphertext using the first common key, and sends the ciphertext to said another 
entity, the first component corresponding to divided specifying information for 
another entity; 

said another entity generates a second common key identical to the first 
common key using a second component contained in secret keys peculiar to said 
another entity sent from the centers, and decrypts said ciphertext using the second 
common key, the second component corresponding to divided specifying information 
for the one entity; and 

computation formulas for generating said secret keys at said centers are as 

follows: 
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S77=a i H 1 [I il ] + 0„ 1 
S7t=a i H 2 C~nt] + 0 i2 T 

i 

i 

■£-^=gaf T ~T (mo d N) 

g7T=g a i" T S i * (modNV 
"i77=g«i" T < SiT^ (mo d N) 

g a i~ T < S i i >l (mod N) 
"£7^= g ar T < SjT^ (mod N) 

where 

vector sy is a secret key corresponding to j'th divided specifying 

information for entity i(j = l,2,...,K) 
[vector Iy] is j'th divided specifying information for entity i; 
vector 1 is a vector of dimension K wherein all components are 1; 
Hj is a symmetrical 2 M i x 2 M i matrix made up of random numbers; 
Mj is size of j'th divided specifying information for entity i; 
K is number of block divisions in information specifying entity i; 
di is a personal secret random number for entity i (where gcd (cu, X(N)) 

= 1 and X ( •) is Carmichael function); 
N is such that N = PQ (where P and Q are prime); 
By is a personal secret random number for entity i (where Bu + B i2 + ... + 
BiK = X(N)); 
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g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i 

(t = 0, 1, 2, T); 
T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) 
below, the expressions B = c A and B = <A> C represent (iii) and 
(iv) below, respectively. 

(i) A = ( a^y ) 

(ii) B = (b P y) 

(iii) byy = cV 

(iv) b p y = a p yc 

18. (Original): The cryptographic communications method according to 
claim 17, wherein computation formulas for generating said common keys are as 
follows: 



So i m — 8 io C 

&\ i m = S i t C 
I 

1 ► - 

St i m = 8 ir C 

X 2im=S i2 C 
i 

X \ im = s i j C 
i ^ _ 

X Kim = S iK [ 



ml 3 
ml ^ 
ml ^ 
ml^ 
m2^ 
mj ^ 
mfd 
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T r y a "° 

ic =n k t 1 im 

i -t 5 c _t y T-t 

= g a i t 4i 0 T lim im 

T 

= g"i T (x lim +y im ) 

T 

= gV <*1 im" H "" t " x kim ) 

= g «1 T <« i « i^n 1 ^ + - +h k"^ ] } +i 99 )T 
= g (HjtiS nS-^K^S "3c» T (mo d N) 

where 

gtim (= vector git [vector I m i]) is a component corresponding to vector I m i 
for entity m, selected from own vector git for 1st block of 
information specifying entity i (t = 0, 1, 2, T); 

xiim = vector su [vector Imi]; 

Xjim (= vector Sij [vector I mj ]) is a component corresponding to vector Imj 
for entity m, selected from own vector Sij for j'th block of 
information specifying entity i (j = 2, 3, K); 

Kim is a common key generated by one entity i for another entity m; 
and 

y im is sum of (K-l) components x jim (j = 2, 3, K), that is, yim = x 2 im + 

X3im + ••• + XKim- 

19. (Currently Amended) A common key generator provided at entities in 
a cryptographic communications system for generating a common key to be used in 
processing to encrypt plaintext to ciphertext and in processing to decrypt ciphertext 
back to plaintext, comprising: 
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storage means for storing secret keys peculiar to said entities produced, 
according to computation formulas given below, for divided specifying information 
resulting from division of information specifying each of said entities into a 
plurality of KWVs, par.h entity generating a c o mmon key bv using a component 
corresponding to the divided specifying infor mation of another entity; 

selection means for selecting components corresponding to divided specifying 
information for opposite entities to be communicated with, from the secret keys 
stored; and 

means for generating said common keys, according to computation formulas 
given below, using said components so selected: 



i 

i . 
i 



£7^g a i" T ~^ (modN) 
"i~J = g a f TS ii (mod N) 
"^=g«f T< ^7T >2 (mod N) 




af T< s n >l (mod N) 




af T < STT^ (mod N) 
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where 

vector Sij is a secret key corresponding to j'th divided specifying 

information for entity i (j = 1, 2, K) 
[vector Iij] is j'th divided specifying information for entity i; 
vector 1 is a vector of dimension K wherein all components are 1; 
Hj is a symmetrical 2 M J x 2 M J matrix made up of random numbers; 
Mj is size of j'th divided specifying information for entity i; 
K is number of block divisions in information specifying entity i; 
di is a personal secret random number for entity i (where gcd (cu, X(N)) 

= 1 and X ( • ) is Carmichael function); 
N is such that N = PQ (where P and Q are prime); 

Bij is a personal secret random number for entity i (where 6ii + 612 + ... + 
6 iK = X(N)); 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i 

(t = 0, 1, 2, ...,T); 
T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) 
below, the expressions B = c A and B = <A> C represent (iii) and 
(iv) below, respectively. 

A - (a P v) 
B = (b P v) 

bjiv — C a jiv 

bjiv — a^v c 



(i) 
(ii) 
(iii) 
(iv) 
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So im~8 io C I mi ^ 

g t ( i m^S it C I ml D 
I 

1 - ► 

eTim = g ix t I ml ] 

X 2im = S i2 [ I m2 ] 
i 

X^irn^S u [I mj ] 
X Kim=S ix [ij^] 



t c rr-t) 

K 5m =n gT c t y im 

t=0 tim 

s 1 t=0T 1 im nn 
Sg a 1 T ( «lim + -t*kiirf T 



= g a-T te , « jCI^] [T^] ■h-HylJg [7^] ) +j <N) > T 

B B «,n?5 c35*~*v5 tw3) T (mod N) 



where 

gtim (= vector git [vector I. m i]) is a component corresponding to vector I m 
for entity m, selected from own vector git for 1st block of 
information specifying entity i (t = 0, 1, 2, T); 
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xum = vector su [vector I m i]; 

Xjim (= vector Sij [vector I m j]) is a component corresponding to vector I m j 
for entity m, selected from own vector Sij for j'th block of 
information specifying entity i (j = 2, 3, .... K); 

Kim is a common key generated by one entity i for another entity m; 
and 

yim is sum of (K-l) components Xjim (j = 2, 3, K), that is, yim = X2im + 

X3im + ... + XKim. 

20. (Original): A cryptographic communications system for reciprocally 
performing, between a plurality of entities, encryption processing for encrypting 
plaintext that is information to be sent into ciphertext and decryption processing for 
decrypting ciphertext so sent back into original plaintext, comprising: 

a plurality of centers each of which generates secret keys peculiar to said 
entities, according to computation formulas given below, using divided specifying 
information resulting from division of information specifying each of said entities 
into a plurality of blocks, and sends said secret keys to said entities; and 

a plurality of entities each of which generates a common key mutually 
employed in said encryption and decryption processing when communicating with 
another entity, according to computation formulas given below, using a component 
contained in own secret key sent from said centers, the component corresponding to 
divided specifying information for said another entity: 

i 
i 
■ 

■ 
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gi 0 sg»i *• (mod N) 
77^= g « i~ T S , , ( m od N ) 
-g7f=g«r T< S,, £ (mod N) 



Si t =s 



= g o,-T< s,, > ( m od N) 



8it = 8 



= g «f T< s n > (mod N) 



where 

vector sij is a secret key corresponding to j'th divided specifying 

information for entity i (j = 1, 2, K) 
[vector Iij] is j'th divided specifying information for entity i; 
vector 1 is a vector of dimension K wherein all components are 1; 
Hj is a symmetrical 2^ x 2^ matrix made up of random numbers; 
Mj is size of j'th divided specifying information for entity i; 
K is number of block divisions in information specifying entity i; 
di is a personal secret random number for entity i (where gcd (cu, X(N)) 

= 1 and X ( • ) is Carmichael function); 
N is such that N = PQ (where P and Q are prime); 
Bij is a personal secret random number for entity i (where Bii + B i2 + ... + 
6iK = X(N)); 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i 

(t = 0, 1, 2, T); 
T is degree of exponent portion; and 
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if c is a scalar, and A and B are matrixes represented in (i) and (ii) 
below, the expressions B = c A and B = <A> C represent (iii) and 
(iv) below, respectively. 



(i) 


A = 


(anv) 


(ii) 


B = 


(b P v) 


(iii) 


b!iv : 


= cV 


(iv) 


bpv 


= 8nxv c 



50 im~S iO C ImlJ 

51 i m =S ii [ I ml ] 
i 

B\ im-S i t [ I ml ] 

8Tim = 8 it C I mI ] 
X2 im ="slT[T^l 

X i, im~ s ii C I mi 3 
X Kim= S iK [ I,^] 

T c v CT-t) 

K im =n gT c t y - 

t=0 tim 
o i t=0" 1 im im 
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= g (h ,[1^ ciiJ5 +■'- rtl K "i5 "i^ 1 )T (mod N) 

where 

gtim (= vector git [vector I m i]) is a component corresponding to vector I m i 
for entity m, selected from own vector git for 1st block of 
information specifying entity i (t = 0, 1, 2, T); 

ixiim = vector su [vector I m i]; 

Xjim (= vector Sij [vector I ra j]) is a component corresponding to vector I m j 
for entity m, selected from own vector Sij for j'th block of 
information specifying entity i (j = 2, 3, K); 

Kim is a common key generated by one entity i for another entity m; 
and 

y im is sum of (K-l) components Xjim (j - % 3, K), that is, yim = X2im + 

X3im + ••• + XKim. 

21. (Original): A computer readable recording medium for storing a 
program that generates at entities involved in communications a common key 
mutually used in processing to encrypt plaintext to ciphertext and in processing to 
decrypt said ciphertext back to said plaintext in a cryptographic communications 
system, comprising: 

first program code means for causing said computer to select a component 
corresponding to divided specifying information of one entity that is a ciphertext 
recipient from a secret key peculiar to another entity that is a ciphertext sender, 
according to computation formulas given below, for each of divided specifying 
information resulting from division of information specifying each of said entities 
into a plurality of blocks; and 
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second program code means for causing said computer to generate said 
common key, according to computation formulas given below, using said 
components selected: 

SrT=a i H 1 C"TTT] +Bnt 



i 
i 
i 

i 
i 
i 



g ; o = g"i 1 (mo d N) 



i~^= g a i TS ii (mod N) 
i~^g a i" T< S ii > (mod N) 

i 

t 

i ' ► ^ 

~^=g«f T< s ii > (mod N) 

i 

i - ■ ■ ■ . 

i7^=g«r T< s m ^ (mod N) 



g 



where 

vector sy is a secret key corresponding to j'th divided specifying 
information for entity i (j = 1, 2, .... K) 
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[vector Iij] is j'th divided specifying information for entity i; 

vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical 2 M i x 2 M i matrix made up of random numbers; 

Mj is size of j'th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

di is a personal secret random number for entity i (where gcd (cu, X(N)) 

= 1 and X ( • ) is Carmichael function); 
N is such that N = PQ (where P and Q are prime); 
6ij is a personal secret random number for entity i (where Bii + 6i2 + ••• 

6iK = X(N)); 

g is maximum generating element with modulo N; 

vector gu is a secret key for 1st block of information specifying entity i 

(t = 0, 1, 2, ...,T); 
T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) 
below, the expressions B = c A and B = <A> C represent (iii) and 
(iv) below, respectively. 

(i) A = (a^v) 

(ii) B = (bpv) 

(iii) byv = cV 

(iv) b^v = aiiv c 

So im — 8 io E Iml 
8i ( i m = S i j C l m il 

St; i m = Sit E Iml^ 
■ 

6Tim = S iT t Ifnl^ 
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^2 i m' 
i 
i 
■ 

X K i m 



S i 2 £ 
S u CO 
= S iK C IfriK^ 



T-t 
m 



T c y (T-t) 
t-0 tim 

= & tCx, 1 . y. 

= 8 i t=oT 1 im i 



= g «~T fa . « lC i -] C!^] H^l > > " 



= g CW^-^V 1 !*? (mod N) 



where 

gtim (= vector git [vector I m i]) is a component corresponding to vector I m 
for entity m, selected from own vector git for 1st block of 
information specifying entity i (t = 0, 1, 2, T); 

xiim = vector su [vector I m i]; 
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Xjim (= vector sij [vector I m j]) is a component corresponding to vector I m j 
for entity m, selected from own vector sij for j'th block of 
information specifying entity i (j = 2, 3, K); 

Kim is a common key generated by one entity i for another entity m; 
and 

yim is sum of (K-l) components xjim (j = 2, 3, K), that is, yim = X2im + 

X3im + ... + XKim. 

22. (Currently Amended) A computer data signal embodied in a carrier 
wave for generating at entities involved in communications common keys used in 
processing to encrypt plaintext to ciphertext and in processing to decrypt said 
ciphertext to said plaintext in a cryptographic communications system, comprising: 

first code segment for causing a computer to select a component 
corresponding to one or more of divided pieces of information specifying one entity 
from a secret key peculiar to another entity; and 

second code segment for causing said computer to generate said common keys 
using said components selected , wherein said computer generates said common 
keys by using a component corresponding to the divided specifying information of 
another computer . 

23. (Currently Amended) A computer data signal embodied in a carrier 
wave for generating at entities involved in communications a common key mutually 
used in processing to encrypt plaintext to ciphertext and in processing to decrypt 
said ciphertext back to said plaintext in a cryptographic communications system, 
comprising: 

first code segment for causing a computer to select a component 
corresponding to divided specifying information of one entity that is a ciphertext 
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recipient from a secret key peculiar to another entity that is a ciphertext sender, 
according to computation formulas given below, for each of divided specifying 
information resulting from division of information specifying each of said entities 
into a plurality of blocks; and 

second code segment for causing said computer to generate said common key, 
according to computation formulas given below , wherein said computer generates 
said common keys by using a component corresponding to the divided specifying 
information of another computer , using said components selected: 



S ii.= a i H i [I ii ] + /3 U T 

i 

g; o = g a ' 1 (mod N) 



gn=g a i TSj 1 (mo d N) 




N) 




a i -T<s7T> t 



(mod 



N) 



(mod 



N) 



where 



vector Sij is a secret key corresponding to j'th divided specifying 

information for entity i (j = 1, 2, K) 
[vector Iij] is j'th divided specifying information for entity i; 
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vector 1 is a vector of dimension K wherein all components are 1; 

Hj is a symmetrical 2 M i x 2 M J matrix made up of random numbers; 

Mj is size of j'th divided specifying information for entity i; 

K is number of block divisions in information specifying entity i; 

cu is a personal secret random number for entity i (where gcd (cu, X(N)) 

= 1 and X ( •) is Carmichael function); 
N is such that N = PQ (where P and Q are prime); 
By is a personal secret random number for entity i (where 6u + 6i2 + ... 

B iK = X(N)); 

g is maximum generating element with modulo N; 

vector git is a secret key for 1st block of information specifying entity i 

(t = 0, 1, 2, T); 
T is degree of exponent portion; and 

if c is a scalar, and A and B are matrixes represented in (i) and (ii) 
below, the expressions B = c A and B = <A>° represent (iii) and 
(iv) below, respectively. 

(i) A=(anv) 

(ii) B = (bpv) 

(iii) bpv = cV 



(iv) bjiv = anv c 




I 
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x 2 im~ S i2 t l m 2^ 
• ^ 

T c y fT-t) 
t =o B tim 

fl- T T Cx 1 y T_t 
= g fl i t«0T lim y im 

T 

= g«i T < *lim +y im> 

T 

= g«i T ^lim- , - +x kirrf 

= g a ~i T (a i H i"n ] C "CP + "i i^i"^ c W^ + "iK> T 

s g a "i T {a i H i cT n ] [ P ^ +h k"£ ] "Jk 1 ))T 

= g «i"75 "S+"«kC ; i5 [ Wf T (mod N) 

where 

gtim (= vector git [vector I m i]) is a component corresponding to vector I m i 
for entity m, selected from own vector git for 1st block of 
information specifying entity i (t = 0, 1, 2, , T); 

xiim = vector su [vector I m i]; 

xjim (= vector Sij [vector I m j]) is a component corresponding to vector I m j 
for entity m, selected from own vector sy for j'th block of 
information specifying entity i (j = 2, 3, K); 

Ki m is a common key generated by one entity i for another entity m; 
and 

yi m is sum of (K-l) components Xjim (j = 2, 3, K), that is, yim = X2im + 

X3im + ••• + XKirn- 
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